Cybersecurity & CUI Safeguarding (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within the contractor’s systems and processes. Compliance with these controls is mandatory to ensure the confidentiality, integrity, and availability of CUI, as defined by federal standards. Additionally, the contractor must adhere to DFARS incident reporting requirements, which mandate timely notification and response to any cybersecurity incidents that may compromise CUI, including documentation and coordination with federal authorities. This subcontract is under the Department of Defense, specifically managed by the ASC Commodities Division, with performance expected to occur at Tinker Air Force Base, Oklahoma, ZIP 73145-8000. The NAICS code 541512 indicates the work falls under computer systems design and related services. The solicitation was posted on August 4, 2026, with responses required by August 12, 2026. All system configurations, security practices, and incident response protocols must be aligned with NIST guidelines and DFARS clauses, and contractors must demonstrate capability to sustain compliance throughout the contract term without external dependency.